CVE-2025-5578

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
PHPGurukul	Dairy Farm Shop Management System	1.3

References

https://github.com/FLYFISH567/CVE/issues/13Exploit, Issue Tracking, Third Party Advisory
https://phpgurukul.com/Product
https://vuldb.com/?ctiid.311035Permissions Required
https://vuldb.com/?id.311035Third Party Advisory, VDB Entry
https://vuldb.com/?submit.588800Third Party Advisory, VDB Entry
https://github.com/FLYFISH567/CVE/issues/13Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Jun 4, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-557807.5A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. S CVE-2025-557879.8In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.CVE-2025-55799.8A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unk CVE-2025-557953.5The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during e CVE-2025-557967.5The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup con CVE-2025-557976.5An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers CVE-2025-55809.8A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part o CVE-2025-55819.8A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been declared as critical. This vulnerability affects unkno CVE-2025-558106.8A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, wh CVE-2025-558166.1HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.CVE-2025-55829.8A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown pro CVE-2025-558246.5ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands